httpdASM Directory Traversal Vulnerability
BID:45599
Info
httpdASM Directory Traversal Vulnerability
| Bugtraq ID: | 45599 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 27 2010 12:00AM |
| Updated: | Dec 27 2010 12:00AM |
| Credit: | John Leitch |
| Vulnerable: |
httpdASM httpdASM 0.92 |
| Not Vulnerable: | |
Discussion
httpdASM Directory Traversal Vulnerability
httpdASM is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
A remote attacker may leverage this issue to retrieve arbitrary files in the context of the affected application, potentially revealing sensitive information that may lead to other attacks.
httpdASM 0.92 is vulnerable; other versions may also be affected.
httpdASM is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
A remote attacker may leverage this issue to retrieve arbitrary files in the context of the affected application, potentially revealing sensitive information that may lead to other attacks.
httpdASM 0.92 is vulnerable; other versions may also be affected.
Exploit / POC
httpdASM Directory Traversal Vulnerability
Attackers can exploit this issue through a browser.
The following exploit code is available:
Attackers can exploit this issue through a browser.
The following exploit code is available:
Solution / Fix
httpdASM Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
httpdASM Directory Traversal Vulnerability
References:
References:
- httpdASM Homepage (httpdASM)
- Vulnerability Reference (John Leitch)